San Francisco Network Passwords Spilled by Prosecutors

 
 
By Chris Preimesberger  |  Posted 2008-07-28 Email Print this article Print
 
 
 
 
 
 
 

UPDATED: San Francisco prosecutors accidentally leaked user names and passwords to the city's network, but officials say the network is safe. The District Attorney's office revealed 150 user names and passwords when they entered them as evidence in the case against Terry Childs, the network admin who locked the city out of its own network for nine days in July.

The tale of the rogue network admin at the city and county of San Francisco continues to roll on with the IT world watching incredulously.

In the latest update to the 15-day-long caper, prosecutors from District Attorney Kamala Harris' office submitted personal-access passwords and user names in an exhibit for court reference last week as evidence in their case against Terry Childs, the network architect and administrator who held the city's WLAN hostage for nine days in a professional disagreement with his manager.

A listing of about 150 user names and passwords of city officials for access into the system was submitted as evidence as part of the public record of the trial. After the passwords were discovered by the press earlier today, they were "redacted" from the record, DA spokeswoman Erica Derryck explained to me.

"The codes were always going to be used as evidence against Mr. Childs, and these [active] passwords have been changed as part of the process of undoing a situation that began with Mr. Childs' alleged criminal conduct," Derryck told me.

It was not determined as to whether the usernames and passwords were active at the time they were first introduced as evidence to the court on July 23. The changeover to new passwords happened at approximately the same time.

Derryck said that a court date to set a preliminary hearing date for Childs will be held in late September -- most probably either Sept. 23 or 24.

The prosecutors claim that Childs' possession of these passwords proves he had too much power and posed an internal threat to the network, and thus, the city. Prosecutors also claimed that Childs could use the passwords to impersonate legitimate users and obtain illegal access to parts of the system where he was not authorized.

Childs, 43, was arrested on July 13 on four felony charges of tampering with the city's FiberWAN network. He changed several high-security passwords and refused to hand them over to department managers after claiming that his managers couldn't be trusted to run the system themselves. He also claimed they had been negligent about allowing viruses and malware into the system.

The nine-day standoff was broken July 23 after Childs divulged the network login codes to Mayor Gavin Newsom during a jailhouse meeting. Despite a hearing with a judge Thursday in an effort to lower his bond, Childs remains in jail in lieu of $5 million bail.

Childs, who resides in Pittsburg, Calif., is the chief designer of the system's FiberWAN, which contains about 60 percent of the city's sensitive human resources, payroll and other personal data.

Data from San Francisco's servers always have been able to be accessed; entry into the network switches and routers -- which control the flow and direction of data input/output -- is what was locked down by Childs.

The system ran on virtual autopilot for about 10 days while Department of Technology head Ron Vinson and others tried to regain access during the standoff. Vinson has yet to address the press about this ongoing issue.



 

 
 
 
 
Chris Preimesberger Chris Preimesberger was named Editor-in-Chief of Features & Analysis at eWEEK in November 2011. Previously he served eWEEK as Senior Writer, covering a range of IT sectors that include data center systems, cloud computing, storage, virtualization, green IT, e-discovery and IT governance. His blog, Storage Station, is considered a go-to information source. Chris won a national Folio Award for magazine writing in November 2011 for a cover story on Salesforce.com and CEO-founder Marc Benioff, and he has served as a judge for the SIIA Codie Awards since 2005. In previous IT journalism, Chris was a founding editor of both IT Manager's Journal and DevX.com and was managing editor of Software Development magazine. His diverse resume also includes: sportswriter for the Los Angeles Daily News, covering NCAA and NBA basketball, television critic for the Palo Alto Times Tribune, and Sports Information Director at Stanford University. He has served as a correspondent for The Associated Press, covering Stanford and NCAA tournament basketball, since 1983. He has covered a number of major events, including the 1984 Democratic National Convention, a Presidential press conference at the White House in 1993, the Emmy Awards (three times), two Rose Bowls, the Fiesta Bowl, several NCAA men's and women's basketball tournaments, a Formula One Grand Prix auto race, a heavyweight boxing championship bout (Ali vs. Spinks, 1978), and the 1985 Super Bowl. A 1975 graduate of Pepperdine University in Malibu, Calif., Chris has won more than a dozen regional and national awards for his work. He and his wife, Rebecca, have four children and reside in Redwood City, Calif.Follow on Twitter: editingwhiz
 
 
 
 
 
 
 

Submit a Comment

Loading Comments...

 
Manage your Newsletters: Login   Register My Newsletters























 
 
 
 
 
 
 
 
 
 
 
Rocket Fuel